-
Notifications
You must be signed in to change notification settings - Fork 18
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improving GoogleApiKeyValidator #229
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🕐
@@ -61,8 +61,10 @@ public static string IsValidDynamic(ref string fingerprint, ref string message) | |||
const string Deleted = "RequestDenied: This API project was not found. This API project may have been deleted or may not be authorized to use this API. You may need to enable the API under APIs in the console)."; | |||
const string KeyNotAuthorized = "RequestDenied: This API key is not authorized to use this service or API."; | |||
const string ProjectNotAuthorized = "RequestDenied: This API project is not authorized to use this API."; | |||
const string IpNotAuthorized = "RequestDenied: This IP, site or mobile application is not authorized to use this API key."; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
IpNotAuthorized [](start = 25, length = 15)
This is not the right change. 'NoMatch' indicates a false positive. Both these conditions indicate that we did in fact find a match and that the key was actually secured in some way. We can't take this change, we can discuss more offline.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I could add Pass to the ValidationState and in the SearchSkimmer, if we get a pass, we change the kind to pass as well. Should we leave error as warning or should we change as well?
In reply to: 578522731 [](ancestors = 578522731)
Fixes #227